{"id":"CVE-2022-23434","aliases":["EUVD-2022-28511","GHSA-2gw6-v2h7-g6vm"],"status":"published","title":"A vulnerability using PendingIntent in Bixby Vision prior to versions 3.7.60.8 in Android S(12),...","description":"A vulnerability using PendingIntent in Bixby Vision prior to versions 3.7.60.8 in Android S(12), 3.7.50.6 in Andorid R(11) and below allows attackers to execute privileged action by hijacking and modifying the intent.","severity":{"version":"3.1","score":4.4,"vector":"CVSS:3.1/AV:L/AC:L/PR:N/UI:R/S:U/C:L/I:L/A:N","level":"medium","assessor":"cna","from":"cve"},"epss":{"day":"2026-11-11","score":0.00237,"percentile":0.14853,"model":"v2026.06.15"},"facts":{"in_kev":false,"known_exploited":false,"public_exploit":false,"fix_available":false},"cwes":["CWE-94"],"published":"2022-02-11T17:40:15Z","modified":"2026-06-17T04:30:00Z","products":[{"vendor":"samsung","product":"bixby"},{"vendor":"samsung mobile","product":"bixby vision"}],"references":[{"url":"https://security.samsungmobile.com/serviceWeb.smsb?year=2022\u0026month=2","tags":["x_refsource_MISC","x_transferred","Vendor Advisory"]},{"url":"https://nvd.nist.gov/vuln/detail/CVE-2022-23434"},{"url":"https://github.com/advisories/GHSA-2gw6-v2h7-g6vm"}],"sources":{"cve":[{"id":"CVE-2022-23434","description":"A vulnerability using PendingIntent in Bixby Vision prior to versions 3.7.60.8 in Android S(12), 3.7.50.6 in Andorid R(11) and below allows attackers to execute privileged action by hijacking and modifying the intent.","status":"published","published":"2022-02-11T17:40:15Z","modified":"2024-08-03T03:43:45.932Z","cvss":[{"version":"3.1","score":4.4,"vector":"CVSS:3.1/AV:L/AC:L/PR:N/UI:R/S:U/C:L/I:L/A:N","level":"medium","assessor":"cna"}],"cwes":["CWE-94"],"updated_at":"2026-11-02T14:34:29.842547Z"}],"euvd":[{"id":"EUVD-2022-28511","description":"A vulnerability using PendingIntent in Bixby Vision prior to versions 3.7.60.8 in Android S(12), 3.7.50.6 in Andorid R(11) and below allows attackers to execute privileged action by hijacking and modifying the intent.","status":"published","published":"2022-02-11T17:40:15Z","modified":"2024-08-03T03:43:45Z","cvss":[{"version":"3.1","score":4.4,"vector":"CVSS:3.1/AV:L/AC:L/PR:N/UI:R/S:U/C:L/I:L/A:N","level":"medium"}],"updated_at":"2026-11-03T03:25:51.181739Z"}],"ghsa":[{"id":"GHSA-2gw6-v2h7-g6vm","title":"A vulnerability using PendingIntent in Bixby Vision prior to versions 3.7.60.8 in Android S(12),...","description":"A vulnerability using PendingIntent in Bixby Vision prior to versions 3.7.60.8 in Android S(12), 3.7.50.6 in Andorid R(11) and below allows attackers to execute privileged action by hijacking and modifying the intent.","status":"published","published":"2022-02-12T00:00:41Z","modified":"2023-02-03T05:06:00Z","updated_at":"2026-11-02T14:53:49.735091Z"}],"nvd":[{"id":"CVE-2022-23434","description":"A vulnerability using PendingIntent in Bixby Vision prior to versions 3.7.60.8 in Android S(12), 3.7.50.6 in Andorid R(11) and below allows attackers to execute privileged action by hijacking and modifying the intent.","status":"published","published":"2022-02-11T18:15:11.747Z","modified":"2026-06-17T04:30:00.34Z","cvss":[{"version":"3.1","score":4.4,"vector":"CVSS:3.1/AV:L/AC:L/PR:N/UI:R/S:U/C:L/I:L/A:N","level":"medium","assessor":"secondary"},{"version":"3.1","score":3.3,"vector":"CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:L/A:N","level":"low","assessor":"primary"},{"version":"2.0","score":2.1,"vector":"AV:L/AC:L/Au:N/C:N/I:P/A:N","level":"low","assessor":"primary"}],"cwes":["CWE-94"],"updated_at":"2026-11-02T14:07:12.155838Z"}]}}